Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/asM87Ahmch5I9rdcGXoThJ5KuYM.roa
File: asM87Ahmch5I9rdcGXoThJ5KuYM.roa (raw, json)
Hash identifier: iiD+TB+Nf+++gHEO7WlyjB4yIRY7wfI+hOGKiU/ANtQ=
Subject key identifier: 6A:C3:3C:EC:08:66:72:1E:48:F6:B7:5C:19:7A:13:84:9E:4A:B9:83
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/asM87Ahmch5I9rdcGXoThJ5KuYM.roa
Signing time: Thu 15 Sep 2022 02:36:57 +0000
ROA not before: Thu 15 Sep 2022 02:36:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24158
IP address blocks: 43.240.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2716 (0xa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 15 02:36:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AC33CEC0866721E48F6B75C197A13849E4AB983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:eb:12:ea:91:79:2e:0c:2c:0c:01:58:1c:
c2:f3:c2:54:9d:b6:7e:2e:6e:de:7a:b5:f5:83:c7:
41:88:f6:41:65:78:49:21:fa:1f:17:95:38:74:f3:
4c:d4:44:ce:ce:db:d6:e4:e5:84:7a:de:6a:ca:22:
19:9e:be:10:42:3a:16:75:f5:4c:38:b7:1e:c0:4c:
92:9d:d3:2b:ad:98:0f:42:bb:81:ef:dc:a8:bd:8a:
ab:1c:23:c7:78:b4:5d:2b:dd:2d:77:12:a9:d5:77:
14:af:b2:b6:50:0e:55:6b:c4:6c:51:b2:5b:d8:c6:
cd:46:80:ff:28:16:e6:c0:d3:83:3b:ed:98:65:0a:
ed:ff:aa:21:1d:c8:32:9d:c1:3b:d3:57:8e:63:d7:
f6:e1:36:9a:83:07:2e:b5:26:01:12:ef:af:c9:1b:
47:06:c1:51:c2:a2:08:31:cc:ef:69:b7:ef:85:f9:
b7:44:aa:10:8e:89:aa:ca:e5:d2:b2:9c:da:36:15:
bc:63:c3:75:e5:fc:04:29:8d:42:99:dc:44:43:2b:
66:3d:53:d4:fa:ad:a7:b0:94:37:16:80:87:39:c7:
33:a2:54:72:30:5c:43:e2:fd:90:4b:93:bc:6d:02:
39:00:9e:1b:d6:94:d9:75:0a:14:34:ad:a9:50:e9:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:3C:EC:08:66:72:1E:48:F6:B7:5C:19:7A:13:84:9E:4A:B9:83
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/asM87Ahmch5I9rdcGXoThJ5KuYM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:1b:32:9f:0f:b6:ff:7b:cd:cc:71:83:83:22:42:37:83:e1:
46:90:e7:92:0c:82:93:47:08:82:21:ba:c9:e6:8d:d5:19:aa:
3f:71:21:aa:fb:c3:9e:13:88:14:2e:a9:00:49:03:67:57:d4:
c8:7f:3a:65:c9:4c:20:3b:3a:43:15:b7:92:b7:96:eb:d6:b7:
37:06:38:df:3d:10:ca:20:87:2c:d9:14:79:83:a6:39:9a:54:
6f:6c:13:ab:df:01:92:c5:02:04:89:fc:e3:14:a8:ac:9a:91:
09:e3:9c:64:c8:06:13:92:fa:6d:6a:4c:ff:31:5d:2b:1e:6c:
1d:b4:01:ec:db:46:d4:95:18:98:d2:9b:3c:96:be:4c:03:01:
08:27:30:86:01:00:5d:97:40:3d:d2:9f:09:e4:f9:26:b1:9c:
8a:5b:24:84:d0:47:6e:8a:1f:94:fa:69:be:84:68:7c:0b:6b:
f2:36:5d:8f:39:2e:45:33:26:4d:2a:3f:54:33:02:fc:7b:f4:
a0:31:48:b6:ea:3e:36:35:d4:50:47:c9:67:69:3d:2f:f9:6f:
a9:15:ff:18:41:9f:30:2c:31:16:0e:eb:07:2a:23:f0:08:7e:
df:d2:67:0e:ee:eb:0e:91:a3:58:31:13:c5:d6:7e:43:35:9e:
1c:ca:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:01 2025 by rpki-client